2024 CVE Vulnerabilities
39,270 CVEs published in 2024.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2024-21780 | HIGH | 7.5 | 0.7% | Feb 2, 2024 | Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted com... |
| CVE-2024-22320 | HIGH | 8.8 | 73.4% | Feb 2, 2024 | IBM Operational Decision Manager 8.10.3 could allow a remote authenticated attacker to execute arbitrary code on the sys... |
| CVE-2024-22903 | HIGH | 8.8 | 1.9% | Feb 2, 2024 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via ... |
| CVE-2024-22900 | HIGH | 8.8 | 1.9% | Feb 2, 2024 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via ... |
| CVE-2024-22899 | HIGH | 8.8 | 2.4% | Feb 2, 2024 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via ... |
| CVE-2024-21399 | HIGH | 8.3 | 1.2% | Feb 2, 2024 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
| CVE-2024-22016 | HIGH | 7.8 | 0.2% | Feb 2, 2024 | In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an authorized user can write directly to the Scada ... |
| CVE-2024-24756 | HIGH | 7.5 | 0.9% | Feb 1, 2024 | Crafatar serves Minecraft avatars based on the skin for use in external applications. Files outside of the `lib/public/`... |
| CVE-2024-21852 | HIGH | 8.8 | 1.2% | Feb 1, 2024 | In Rapid Software LLC's Rapid SCADA versions prior to Version 5.8.4, an attacker can supply a malicious configuration fi... |
| CVE-2024-0325 | HIGH | 7.8 | 0.8% | Feb 1, 2024 | In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins. |
| CVE-2024-1167 | HIGH | 7.5 | 0.5% | Feb 1, 2024 | When SEW-EURODRIVE MOVITOOLS MotionStudio processes XML information unrestricted file access can occur. |
| CVE-2024-24557 | HIGH | 7.8 | 0.3% | Feb 1, 2024 | Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system i... |
| CVE-2024-0935 | HIGH | 7.5 | 0.4% | Feb 1, 2024 | Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Releas... |
| CVE-2024-22449 | HIGH | 7.8 | 0.2% | Feb 1, 2024 | Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerab... |
| CVE-2024-22859 | HIGH | 8.8 | 0.5% | Feb 1, 2024 | Cross-Site Request Forgery (CSRF) vulnerability in livewire before v3.0.4, allows remote attackers to execute arbitrary ... |
| CVE-2024-24573 | HIGH | 8.8 | 0.8% | Jan 31, 2024 | facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user... |
| CVE-2024-24747 | HIGH | 8.8 | 34.1% | Jan 31, 2024 | MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the paren... |
| CVE-2024-23651 | HIGH | 7.4 | 0.8% | Jan 31, 2024 | BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. T... |
| CVE-2024-21626 | HIGH | 8.6 | 18.1% | Jan 31, 2024 | runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and e... |
| CVE-2024-21916 | HIGH | 7.5 | 0.6% | Jan 31, 2024 | A denial-of-service vulnerability exists in specific Rockwell Automation ControlLogix ang GuardLogix controllers. If ex... |
| CVE-2024-21893 | HIGH | 8.2 | 100.0% | Jan 31, 2024 | A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy... |
| CVE-2024-21888 | HIGH | 8.8 | 86.8% | Jan 31, 2024 | A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x... |
| CVE-2024-0833 | HIGH | 7.8 | 0.2% | Jan 31, 2024 | In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the ... |
| CVE-2024-0832 | HIGH | 7.8 | 0.2% | Jan 31, 2024 | In Telerik Reporting versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applicati... |
| CVE-2024-0219 | HIGH | 7.8 | 0.2% | Jan 31, 2024 | In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the appli... |
Check if your code is affected by 2024 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now